Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa
File:                     3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (raw, json)
Hash identifier:          IYklB/U3RfE/oKJVLy/Xsr2JbD+zmVsGt59LebpV5y4=
Subject key identifier:   9B:5C:66:01:6A:40:99:39:41:66:4F:B7:19:38:C6:7F:C8:17:88:4F
Certificate issuer:       /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Certificate serial:       40C1ED91348AF5AAC8F5A6F151E3BE302F0FD31A
Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa
Signing time:             Wed 05 Mar 2025 22:42:43 +0000
ROA not before:           Wed 05 Mar 2025 22:37:43 +0000
ROA not after:            Wed 04 Mar 2026 22:42:43 +0000
asID:                     264196
IP address blocks:        138.97.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
                          rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c1:ed:91:34:8a:f5:aa:c8:f5:a6:f1:51:e3:be:30:2f:0f:d3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
        Validity
            Not Before: Mar  5 22:37:43 2025 GMT
            Not After : Mar  4 22:42:43 2026 GMT
        Subject: CN=9B5C66016A40993941664FB71938C67FC817884F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:b7:99:ec:62:03:c6:cd:e3:09:a4:c4:77:
                    5c:24:59:e1:92:15:f3:44:c3:3f:43:b4:ea:59:5d:
                    76:2c:3e:67:9b:52:5e:38:96:2b:84:51:af:96:d0:
                    63:45:74:2d:a8:a6:4a:72:c1:44:95:05:57:25:bb:
                    53:0f:f2:ba:d2:cd:e8:de:dd:57:0d:83:d6:0c:d7:
                    d2:d3:fc:d9:ec:78:7f:ae:8b:f5:5f:da:68:4b:eb:
                    88:94:a5:ee:59:65:37:fc:23:23:84:08:58:16:ac:
                    84:fb:a3:f3:50:b1:23:2a:b6:1e:98:4f:7c:79:1e:
                    c4:1e:25:3e:4e:d1:bd:70:d1:87:d9:ec:31:8d:1a:
                    2d:f1:07:4e:b8:98:2a:b1:86:1c:58:6a:c8:cb:ec:
                    ff:af:51:28:87:e5:ab:40:16:c5:02:17:57:ee:0d:
                    d2:c8:76:4e:07:be:7c:c3:30:1e:45:14:10:e9:44:
                    b2:0b:76:30:cc:8d:ca:04:b4:1d:f8:4f:e6:91:98:
                    df:75:cb:63:a8:da:73:5f:92:eb:76:65:36:c3:75:
                    21:54:72:e5:be:54:a7:ea:87:18:6e:9e:09:0e:96:
                    0c:ba:20:d1:63:85:d4:18:f6:c6:9d:1c:54:30:cb:
                    1f:ab:4d:9a:56:f8:04:84:d0:10:fb:55:16:3c:a4:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5C:66:01:6A:40:99:39:41:66:4F:B7:19:38:C6:7F:C8:17:88:4F
            X509v3 Authority Key Identifier:
                keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:60:0f:c7:41:7e:e2:5b:e5:ed:df:81:17:45:15:e5:32:50:
         28:28:92:24:c0:10:3f:71:86:12:70:86:5f:59:7d:eb:22:b7:
         d6:9a:61:4f:31:9a:c2:0c:73:89:6e:ec:28:8e:6b:c6:1d:b7:
         ab:26:e9:ba:0a:e4:78:b0:e4:ff:8c:91:04:de:a9:32:53:32:
         b3:5f:28:fc:d9:23:f1:76:fe:f3:c2:64:66:af:9f:68:03:3a:
         9c:95:0f:d9:19:9d:d9:04:c7:d9:15:25:1a:d6:e0:55:83:a4:
         f7:01:1a:8e:42:ff:b0:60:bc:1e:b6:25:d2:c9:07:c4:a8:0b:
         13:68:78:ab:e0:62:57:2c:f3:83:6c:73:04:ef:59:86:88:5c:
         08:af:5e:a0:ee:60:99:5a:d2:73:4f:d6:3d:6c:c8:31:83:60:
         5d:22:1c:7f:71:b7:99:b7:fc:46:4b:47:11:d9:a5:fe:23:7c:
         24:18:a0:3e:f4:61:74:ca:8b:21:75:05:7e:1f:54:9d:9a:2f:
         76:24:66:b4:75:89:41:c4:ba:cf:96:b7:0b:fa:31:93:dd:93:
         85:b9:b7:4c:b4:91:d2:91:c8:a8:9f:6c:32:08:2c:63:c8:e3:
         9e:14:d4:21:5d:11:32:f9:06:07:7d:d6:0a:46:71:a9:da:1b:
         ec:c4:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:48 2025 by rpki-client on console.sobornost.net